The dark forest law of Web3 has been validated once again, this time at a cost of 118,785 BUSD.
Just now, Scam Sniffer caught a disaster on the BSC chain. The victim didn't click on phishing links but was caught by a seemingly harmless function call: increaseAllowance. In this circle of 0s and 1s, hackers exploit not only code vulnerabilities but also linguistic traps. The word "increase" carries a deceptive tone of "just a little," but in reality, the permissions it grants to attackers are no different from handing over the house keys. Even wallet interaction design has to take responsibility now. For such non-high-frequency, long-named functions, the UI often lacks sufficient red alerts. Code is law, but function names are often lies. Don't trust those words that seem "harmless"; as soon as you sign your name, your asset control rights have already been transferred.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
The dark forest law of Web3 has been validated once again, this time at a cost of 118,785 BUSD.
Just now, Scam Sniffer caught a disaster on the BSC chain.
The victim didn't click on phishing links but was caught by a seemingly harmless function call: increaseAllowance.
In this circle of 0s and 1s, hackers exploit not only code vulnerabilities but also linguistic traps. The word "increase" carries a deceptive tone of "just a little," but in reality, the permissions it grants to attackers are no different from handing over the house keys.
Even wallet interaction design has to take responsibility now. For such non-high-frequency, long-named functions, the UI often lacks sufficient red alerts.
Code is law, but function names are often lies. Don't trust those words that seem "harmless"; as soon as you sign your name, your asset control rights have already been transferred.